Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Nilage.gen.GSA.32317.28404.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.Nilage.gen.GSA.32317.28404.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.W32.Nilage.gen.GSA.32317.28404.exe
-
Size
14KB
-
MD5
6b69224c28910c7aca87725e3a19e320
-
SHA1
248a89669edbceca70d63740844585897d25ee64
-
SHA256
06cef0f60f5e3d5f83e154f0b518218a80284108656e266c2fae2383f3b07222
-
SHA512
3aaed2ddcb55bfdb8df3b3961d50552a681212791a07a0fda3bc961e39de4f53135b5043ba56aed5a9ec61dad40f946611692d9043043483959834cded21d7a2
-
SSDEEP
384:x45l9n4QHyLWDRhjRXAGF6cFcAVi34kJw9Msngr:x4JnKLWDRhjRI9AkuMuW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.Nilage.gen.GSA.32317.28404.exe
Files
-
SecuriteInfo.com.W32.Nilage.gen.GSA.32317.28404.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE